Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
File: 5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa (raw, json)
Hash identifier: eljLkAfMpxO0NeVARGPYoPHfklJP+78xdZoYof6NmwQ=
Subject key identifier: 15:87:BB:87:DC:A8:7B:77:0F:CF:B2:23:0C:32:21:F5:54:C3:92:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BED5D6700D390394137213C184E031023F94A33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f2c:c800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ed:5d:67:00:d3:90:39:41:37:21:3c:18:4e:03:10:23:f9:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7b37054ed56be66f614362e2e0dcc3a24a9e17f7ab4c024b47decd37ae3c253e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:e7:b8:02:91:ef:5a:ea:2a:61:1d:81:2f:
50:d3:bb:61:02:60:06:e1:f0:b9:12:de:31:c9:56:
39:1a:4c:4d:f5:e2:a2:13:9d:46:48:d0:28:79:a5:
ec:0b:29:70:90:20:58:bd:b5:61:d1:64:7a:42:fd:
1b:66:b6:6b:ed:7c:40:3b:84:6f:3f:88:eb:ff:cf:
5b:d5:60:50:37:8f:26:be:3c:d5:ec:bc:fd:40:b2:
fa:d5:e8:32:30:78:c0:b7:db:5d:f4:d7:de:ab:d7:
38:8f:5b:21:fd:9f:2d:ec:02:5d:4b:86:8f:11:e1:
28:62:bf:75:a9:2c:c7:7b:94:b6:5c:92:02:e1:f5:
05:b6:da:e2:36:c7:24:b6:ee:81:61:fd:8b:13:90:
57:dd:d9:78:60:a5:46:cf:db:6e:6f:c6:b0:cc:0a:
4f:3a:df:5b:b1:22:3e:ac:d8:38:d7:b9:7a:a3:e7:
74:c2:fd:df:61:09:1f:07:f4:ea:e4:3d:a4:af:f5:
b7:80:e0:8a:54:87:49:e1:c3:23:30:af:27:7a:9b:
84:9a:f8:b8:84:c9:9b:de:2d:cb:a7:8d:bf:5a:37:
90:4c:6c:73:04:d5:f7:2e:93:30:f0:f2:05:b4:24:
98:3c:79:a1:26:15:cd:0a:4b:1f:b7:8d:6f:31:69:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:BB:87:DC:A8:7B:77:0F:CF:B2:23:0C:32:21:F5:54:C3:92:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ea5b7ae-7572-4cb6-ad11-f441a34761fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2c:c800::/37
Signature Algorithm: sha256WithRSAEncryption
41:1f:17:97:6a:0a:46:ec:5e:05:33:d2:9f:ad:58:8e:54:72:
17:06:68:bc:0e:5d:83:0f:76:81:25:be:6f:b5:fe:60:b2:09:
a0:5a:51:b3:ad:86:17:43:f3:cf:7d:b5:63:37:27:29:01:a1:
88:0f:39:cf:f3:15:b7:4e:83:20:f9:c6:b3:ff:0b:94:5a:4f:
44:a1:ed:8e:50:e6:d6:2e:d8:eb:fa:f4:d0:5c:19:1f:66:47:
9e:af:62:be:e9:c8:2e:37:d2:fd:e1:9a:14:c2:dc:c3:de:cf:
e8:ef:b7:ef:0f:43:f3:17:a0:c7:8e:c7:75:21:76:85:61:a1:
0b:8c:5f:10:d0:4b:18:9a:aa:35:df:73:6b:b9:28:01:31:ec:
10:4a:fd:01:77:00:fb:50:2c:b1:8c:34:f2:84:06:ad:93:f2:
ba:1d:77:99:16:d4:90:a4:7a:00:14:2a:8b:4e:fd:c1:39:2e:
9d:9f:7b:d2:28:35:61:75:4b:5e:6f:8a:1a:0a:1e:cd:1c:5e:
ba:01:02:d5:54:ee:72:c6:3e:c8:bf:5a:3d:22:b0:0f:25:01:
23:ba:b7:1c:97:ef:26:b7:e4:a5:0b:64:f4:45:ff:b0:e4:0d:
c7:0f:ef:4d:ae:4c:24:50:22:a7:c4:c1:86:d3:50:d0:1a:ba:
6b:41:6a:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:19 2025 by rpki-client